Kevin is correct; as your're running IP namespaces, you'll need to look for iptables in that namespace.<div>The metadata settings however are visible in the log extract you posted.</div><div>It seems your metadata server is sitting at <span style="font-family:'Bitstream Vera Sans Mono',monospace;font-size:13px"><a href="http://172.16.0.201:8775">172.16.0.201:8775</a></span></div>
<div>I guess you've already ensured that endpoint is reachable from the router (a wget execute in the router namespace will prove that).</div><div><br></div><div>Also, metadata is one of those (few) features which in Quantum come with strings attached. You can find more info on this in the admin guide [1]. The link to the page where metadata are discussed reported below, just in case you haven't already seen it.</div>
<div><br></div><div>Salvatore</div><div><br></div><div><br></div><div>[1] <a href="http://docs.openstack.org/trunk/openstack-network/admin/content/adv_cfg_l3_agent_metadata.html">http://docs.openstack.org/trunk/openstack-network/admin/content/adv_cfg_l3_agent_metadata.html</a></div>
<div><br><div class="gmail_quote">On 7 November 2012 19:00, Stephen Gran <span dir="ltr"><<a href="mailto:stephen.gran@guardian.co.uk" target="_blank">stephen.gran@guardian.co.uk</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<u></u>
<div><div class="im">
On Wed, 2012-11-07 at 16:02 +0000, Kevin Jackson wrote:<br>
<blockquote type="CITE">
Heyup good folk of OpenStack,<br>
I'm having the same issue as Sina. My configuration seems to look OK (I have an instance, with IP that can ping its default route to on an internal network) but I get the failure to contact the metadata server with the explanation that Sina gave.<br>
<br>
In my /var/log/quantum/l3_agent.log I have the following: <a href="http://paste.openstack.org/show/24801/" target="_blank">http://paste.openstack.org/show/24801/</a><br>
There's also a paste of an iptables output that I would've expected to see the DNAT rules in.<br>
<br>
What am I missing?<br>
</blockquote>
<br></div>
You're not looking in the correct network namespace:<br>
<br>
ip netns exec qrouter-61245d6f-1195-4ca0-ba08-f0636f7d44c6 iptables -L -v -t nat<br>
ip netns exec qrouter-61245d6f-1195-4ca0-ba08-f0636f7d44c6 ip r<br>
<br>
Cheers,<br>
<table cellspacing="0" cellpadding="0" width="100%">
<tbody><tr>
<td>
<pre>--
Stephen Gran
Senior Systems Integrator - <a href="http://guardian.co.uk" target="_blank">guardian.co.uk</a>
</pre>
</td>
</tr>
</tbody></table>
</div>
<pre>Please consider the environment before printing this email.
------------------------------------------------------------------
Visit <a href="http://guardian.co.uk" target="_blank">guardian.co.uk</a> - website of the year
<a href="http://www.guardian.co.uk" target="_blank">www.guardian.co.uk</a> <a href="http://www.observer.co.uk" target="_blank">www.observer.co.uk</a> <a href="http://www.guardiannews.com" target="_blank">www.guardiannews.com</a>
On your mobile, visit <a href="http://m.guardian.co.uk" target="_blank">m.guardian.co.uk</a> or download the Guardian
iPhone app <a href="http://www.guardian.co.uk/iphone" target="_blank">www.guardian.co.uk/iphone</a> and iPad edition <a href="http://www.guardian.co.uk/iPad" target="_blank">www.guardian.co.uk/iPad</a>
Save up to 37% by subscribing to the Guardian and Observer - choose the papers you want and get full digital access.
Visit <a href="http://guardian.co.uk/subscribe" target="_blank">guardian.co.uk/subscribe</a>
---------------------------------------------------------------------
This e-mail and all attachments are confidential and may also
be privileged. If you are not the named recipient, please notify
the sender and delete the e-mail and all attachments immediately.
Do not disclose the contents to another person. You may not use
the information for any purpose, or store, or copy, it in any way.
Guardian News & Media Limited is not liable for any computer
viruses or other material transmitted with or as part of this
e-mail. You should employ virus checking software.
Guardian News & Media Limited
A member of Guardian Media Group plc
Registered Office
PO Box 68164
Kings Place
90 York Way
London
N1P 2AP
Registered in England Number 908396
</pre><br>_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
<br></blockquote></div><br></div>